$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/346CA526892F0D074D2B9816B2769025CFE97FF5.cer File: 346CA526892F0D074D2B9816B2769025CFE97FF5.cer (raw, json) Hash identifier: iGsfl70bobjJubyeeKhypP/x2sgl7DqyPw4xLWSUrhk= Subject key identifier: 34:6C:A5:26:89:2F:0D:07:4D:2B:98:16:B2:76:90:25:CF:E9:7F:F5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3C849936A0968D5E3B16927B35EACB7AC65F685A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 03:17:15 +0000 Certificate not after: Wed 27 Jan 2027 03:22:15 +0000 Subordinate resources: AS: 27969 IP: 200.63.48.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:84:99:36:a0:96:8d:5e:3b:16:92:7b:35:ea:cb:7a:c6:5f:68:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 03:17:15 2026 GMT Not After : Jan 27 03:22:15 2027 GMT Subject: CN=346CA526892F0D074D2B9816B2769025CFE97FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:7b:56:9c:1b:79:82:e9:4a:79:34:7d:f6: 5d:b4:8b:d5:26:6d:8c:13:cb:a0:f0:8b:1a:2f:40: f1:27:4a:e6:bb:e3:71:16:0f:c0:6f:8c:f7:e5:32: 8a:04:69:97:20:46:2c:11:4f:4d:a5:5a:7a:06:ca: 54:b5:53:40:f7:92:04:3f:34:4b:be:a4:bb:41:33: 41:83:5c:e7:86:f9:cc:e4:c5:53:9e:26:81:78:44: e1:85:b1:5a:83:20:1b:33:3c:a6:78:91:74:37:fc: 72:0e:f2:fc:c1:0c:1f:6e:c9:a6:12:19:48:ba:5e: 93:cb:2e:e0:22:7a:b3:30:4f:71:dc:80:ed:41:58: fa:08:40:56:a7:ec:98:03:88:a7:e8:ea:c4:5c:48: 51:ba:8b:2d:34:0b:a4:55:2a:e4:d0:f9:2a:e3:5e: 35:1c:63:9e:92:40:dc:45:ed:47:be:b5:72:4f:d8: 0b:70:1f:22:60:ff:84:76:64:1d:e8:24:3e:1d:7d: 2c:42:c1:99:42:e1:34:27:61:ad:92:b1:81:50:42: b6:b0:2f:ff:ef:3c:d2:96:7d:38:a6:46:43:53:58: f4:fc:2e:ab:b1:39:7c:ca:ef:4f:cf:ac:dc:d0:52: 0e:b6:a6:89:60:9d:b1:bb:d6:4b:d4:96:5d:20:e4: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:6C:A5:26:89:2F:0D:07:4D:2B:98:16:B2:76:90:25:CF:E9:7F:F5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.63.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27969 Signature Algorithm: sha256WithRSAEncryption 59:16:3d:16:30:92:c8:65:ee:20:ea:1f:1e:5e:89:e5:98:10: b6:70:5d:95:2d:3f:5e:a7:ec:e4:8d:69:a7:f0:8f:93:e1:d4: 25:24:05:38:9e:69:d7:fa:12:c8:a8:f3:39:6f:f2:e1:24:f0: d7:ae:3f:48:18:90:08:30:85:83:1c:8b:20:31:f6:7c:ca:61: 63:29:c5:51:15:77:9a:9b:84:cc:14:10:80:78:e8:29:f9:19: c1:29:b0:fd:36:66:a4:fd:e9:f5:de:ac:90:1f:02:9a:27:f7: a8:c0:e3:38:ec:8d:af:c5:86:f1:9a:92:9c:e5:d0:75:6d:de: 8d:af:b3:ba:df:1e:97:5e:f6:8e:2f:77:5e:ad:9f:fb:d1:aa: e0:a7:10:87:4d:a1:79:5d:5b:b9:ec:17:93:7c:71:75:70:f4: 91:cc:45:f9:40:1e:7a:65:b3:24:60:58:b2:26:ae:df:fb:ff: c6:00:63:43:b4:f1:dc:91:54:e8:40:de:fb:20:d0:89:ff:47: f6:5a:9f:97:35:8a:c2:60:09:6f:ff:14:c2:70:51:94:b0:a0: 00:da:7d:11:e2:65:5f:e9:0f:d9:5f:cc:d5:88:bc:16:e1:b4: 26:ea:ed:89:01:08:fa:ff:59:0c:09:96:e6:a2:89:6a:14:08: 39:06:a1:77 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUPISZNqCWjV47FpJ7NerLesZfaFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMzE3MTVaFw0yNzAxMjcwMzIyMTVaMDMxMTAvBgNV BAMTKDM0NkNBNTI2ODkyRjBEMDc0RDJCOTgxNkIyNzY5MDI1Q0ZFOTdGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJI3tWnBt5gulKeTR99l20i9Um bYwTy6DwixovQPEnSua743EWD8BvjPflMooEaZcgRiwRT02lWnoGylS1U0D3kgQ/ NEu+pLtBM0GDXOeG+czkxVOeJoF4ROGFsVqDIBszPKZ4kXQ3/HIO8vzBDB9uyaYS GUi6XpPLLuAierMwT3HcgO1BWPoIQFan7JgDiKfo6sRcSFG6iy00C6RVKuTQ+Srj XjUcY56SQNxF7Ue+tXJP2AtwHyJg/4R2ZB3oJD4dfSxCwZlC4TQnYa2SsYFQQraw L//vPNKWfTimRkNTWPT8LquxOXzK70/PrNzQUg62polgnbG71kvUll0g5AZHAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0bKUmiS8NB00r mBaydpAlz+l/9TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0FGQTgxMTA1MDBCQjhFQzBDOTEzOTlD QUY5RDRDMDQwNjBCOTQzNDY1RkIxRjI3RjI4QjVCMzBEQkZFMEUyRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQUZBODExMDUwMEJCOEVDMEM5MTM5OUNBRjlENEMwNDA2MEI5NDM0NjVG QjFGMjdGMjhCNUIzMERCRkUwRTJFLzAvMzQ2Q0E1MjY4OTJGMEQwNzREMkI5ODE2 QjI3NjkwMjVDRkU5N0ZGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyD8wMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm1BMA0GCSqGSIb3DQEBCwUAA4IBAQBZFj0WMJLI Ze4g6h8eXonlmBC2cF2VLT9ep+zkjWmn8I+T4dQlJAU4nmnX+hLIqPM5b/LhJPDX rj9IGJAIMIWDHIsgMfZ8ymFjKcVRFXeam4TMFBCAeOgp+RnBKbD9Nmak/en13qyQ HwKaJ/eowOM47I2vxYbxmpKc5dB1bd6Nr7O63x6XXvaOL3derZ/70argpxCHTaF5 XVu57BeTfHF1cPSRzEX5QB56ZbMkYFiyJq7f+//GAGNDtPHckVToQN77INCJ/0f2 Wp+XNYrCYAlv/xTCcFGUsKAA2n0R4mVf6Q/ZX8zViLwW4bQm6u2JAQj6/1kMCZbm oolqFAg5BqF3 -----END CERTIFICATE-----Generated at Mon Mar 2 16:33:57 2026 by rpki-client